
$ rpki-client -vvvf rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
File: rjnJrCEn_qcOoyYOwW0giDxVdfU.mft (raw, json)
Hash identifier: Qj4czqZqxFIXrKurS8nI6YOY5fUv+gmBRPoK2r9vPEc=
Subject key identifier: 2E:99:4D:EB:C0:A4:63:27:85:71:FD:C4:FE:E5:70:AC:38:03:84:10
Authority key identifier: AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
Certificate issuer: /CN=A915A8C3/serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Certificate serial: 96
Authority info access: rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
Manifest number: 8E
Signing time: Wed 21 Oct 2026 08:10:33 +0000
Manifest this update: Wed 21 Oct 2026 08:10:32 +0000
Manifest next update: Wed 28 Oct 2026 08:10:32 +0000
Files and hashes: 1: rjnJrCEn_qcOoyYOwW0giDxVdfU.crl (hash: kTzci/s7hacPjORkQhrg6sw2+jkcJMlfqcmmq/13duk=)
2: 29B85B52FDD011F0BDC391246C6F56BC.roa (hash: sAlz6G2JLzFH/kwpxfqxTZ2W57QZu+Wfp6+JbqONI7s=)
3: AF8E04FCFDD011F0A09CBC256C6F56BC.roa (hash: 73wflQOmp36ch6aTOQGjf1gpEemRE1RYS0amCkdLkng=)
4: 846CC09CFDD011F0A25053256C6F56BC.roa (hash: 7ja/uUA5rNPy4R9clAJYgMLZ/ert4qYvj2qbqmL8TeI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 28 Oct 2026 02:50:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 150 (0x96)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915A8C3, serialNumber=AE39C9AC2127FEA70EA3260EC16D20883C5575F5
Validity
Not Before: Oct 21 08:10:32 2026 GMT
Not After : Oct 28 08:10:32 2026 GMT
Subject: CN=6ad87379-e24a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:35:c7:9a:6a:09:a9:9c:3e:fb:ad:0f:33:a1:
1f:77:0b:bb:47:98:ae:05:68:40:cd:7f:d2:d2:0c:
e2:dd:a4:c8:70:3a:51:6e:84:29:f1:2e:c4:19:ef:
e1:b2:83:39:a5:19:db:d0:a0:62:a4:87:42:33:70:
55:00:c0:c6:32:bb:89:f5:54:8b:9c:5d:7c:14:ca:
a2:30:cf:3a:f5:58:ea:33:c6:b4:a3:66:fd:20:c4:
c5:b0:e5:0e:2e:5b:dd:ab:4f:f5:e0:fe:d6:73:86:
d1:ab:b0:c4:70:fd:e9:99:9a:e8:9a:5d:ec:be:aa:
5d:96:29:b8:87:59:43:22:57:d2:72:e5:1d:98:db:
ee:70:b6:eb:54:69:1b:84:f8:71:7a:aa:80:85:08:
a5:40:0a:82:ad:3f:9b:32:64:ca:a5:23:04:3b:7a:
5e:a4:47:f0:a7:e6:9a:ba:e8:8b:cd:c5:d6:95:7a:
31:85:4c:57:84:b2:04:82:ad:7f:dd:55:91:3b:a8:
af:15:68:5f:0a:c4:a6:26:0d:c5:a1:ed:10:be:6a:
68:a0:59:90:dd:b2:6b:a8:16:10:39:56:8d:a7:01:
0a:29:a0:3e:58:4b:c9:78:9c:33:7a:07:68:81:c6:
d2:47:d7:e1:0f:d3:c5:50:f8:ff:94:76:86:72:db:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:99:4D:EB:C0:A4:63:27:85:71:FD:C4:FE:E5:70:AC:38:03:84:10
X509v3 Authority Key Identifier:
keyid:AE:39:C9:AC:21:27:FE:A7:0E:A3:26:0E:C1:6D:20:88:3C:55:75:F5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rjnJrCEn_qcOoyYOwW0giDxVdfU.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915A8C3/FF947C84FDCF11F08AFC50016C6F56BC/rjnJrCEn_qcOoyYOwW0giDxVdfU.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
9b:2d:21:d6:b1:01:91:e9:ce:e5:dd:e2:7c:bf:af:c3:c6:e7:
d8:08:1c:f3:5b:85:e2:2d:7f:b9:ab:44:b4:b4:75:10:cb:79:
32:34:d6:33:2a:c6:f7:38:c9:a0:c9:95:4c:b5:9b:30:ed:f7:
8f:51:e2:7f:e0:ce:3f:79:ea:40:d6:9c:94:15:f8:7d:15:db:
69:a6:4a:66:bb:0e:b9:8f:b7:a0:96:a3:f5:19:57:99:41:05:
ec:51:03:42:ad:67:aa:45:75:1f:8d:0e:17:18:cb:f3:7a:b4:
df:68:ab:81:aa:cb:de:8a:f0:62:06:9c:4f:be:b2:aa:96:3a:
81:be:e2:a4:06:26:7f:d4:df:ec:63:ac:ba:63:e0:d0:71:a7:
98:4e:cd:c9:e0:f5:70:62:6b:10:0d:e8:20:46:24:48:3f:75:
2c:e1:3d:3f:8b:03:69:1a:cb:6a:79:b3:51:6e:c9:b7:7a:f9:
0a:91:0f:e0:bb:dd:d7:0d:b6:ef:74:27:15:59:c6:9d:20:fd:
6e:c8:9c:d9:25:7b:5b:f1:52:fb:fb:b8:66:45:00:39:3f:e7:
73:ac:15:dd:79:d0:40:52:4d:db:73:e0:a2:ed:66:eb:0b:f9:
9f:70:22:61:32:4d:46:e5:91:9a:e1:7c:54:21:4c:31:48:73:
b7:2f:89:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 16:03:46 2026 by rpki-client